SDPLAT-26630: use GH_APP in workflows (#803)

Skyscanner · Jan 31, 2025 · f683edb · f683edb
1 parent 68720d1
commit f683edb
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 2 deletions.
diff --git a/.github/workflows/label-check.yml b/.github/workflows/label-check.yml
@@ -9,7 +9,12 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.GH_APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
       - uses: docker://agilepathway/pull-request-label-checker:latest
         with:
           one_of: major,minor,patch,skip-changelog
-          repo_token: ${{ secrets.GITHUB_TOKEN }}
+          repo_token: ${{ steps.app-token.outputs.token }}
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -51,7 +51,13 @@ jobs:
       contents: write
       pull-requests: read
     steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.GH_APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+
       - name: Draft release notes
         uses: release-drafter/release-drafter@v5
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}